$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa File: 4c160dcf-ed33-3837-89e6-a5d92394601e.roa (raw, json) Hash identifier: IVcIfsgJNlzW/837tXWQ4mKMGG29TfsaN3oTBxwZQjk= Subject key identifier: 3B:40:85:33:9E:9B:EA:47:0E:73:E5:D1:8E:33:CA:F2:AC:36:18:C5 Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F432858497F09A34E86934C9CBB85D480 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 18540 IP address blocks: 198.148.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a3:4e:86:93:4c:9c:bb:85:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=08631b1f-a74e-4672-a2f3-3a3c3e48d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:cf:50:10:0c:ab:3a:9b:4c:21:cd:87:2f: f3:f5:ff:4c:79:ee:79:cc:60:b1:6a:db:b9:80:03: 7d:c4:00:c8:eb:92:46:72:04:da:86:3c:07:21:75: d2:44:a4:7b:8f:46:1e:e4:19:95:ae:16:ea:b4:19: 89:29:cd:f9:69:86:06:09:96:93:45:53:d5:09:7d: 91:e2:40:70:e6:47:7f:04:b9:bd:8a:e7:92:b6:7f: 48:c7:95:67:fb:bb:aa:be:a2:5f:50:dc:16:22:13: f4:cc:b1:01:0e:32:1c:c6:18:9f:a8:f7:cb:ee:56: a4:6a:88:93:94:4d:93:56:9e:21:31:28:f8:8b:45: 64:58:02:d4:67:37:b1:fa:38:ad:8b:3a:81:11:8d: a9:2e:90:8a:0f:85:7c:e5:a9:25:22:b9:80:e1:93: 1f:7e:71:bb:11:f7:b9:39:95:bc:6a:81:9e:f1:29: fd:ca:c5:c3:98:ac:fd:dd:e0:16:74:b6:76:97:35: 20:f6:8e:6f:2b:3e:35:3c:c3:7c:e1:09:a1:5a:46: 42:54:d8:41:eb:b2:65:de:d2:52:2b:9d:2c:a2:6d: 45:d4:28:b8:3b:86:7e:ae:d8:e2:8e:1a:b8:ee:6a: 22:28:65:07:5e:25:fa:83:d0:ba:87:c7:16:3e:7e: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:40:85:33:9E:9B:EA:47:0E:73:E5:D1:8E:33:CA:F2:AC:36:18:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/4c160dcf-ed33-3837-89e6-a5d92394601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:23:a5:28:36:00:f7:5d:75:d3:27:0d:58:82:f1:de:ef:73: 95:c3:14:a5:d2:41:05:4a:2a:02:54:54:e5:3a:f4:0d:42:2a: 9f:37:0e:01:34:a8:4b:3e:6d:e7:d5:a1:54:9b:78:7b:f4:4b: 66:e2:7e:43:34:00:77:e0:ef:74:3b:dc:1d:94:32:b5:77:88: ae:30:7b:25:55:35:4f:22:37:1a:97:c5:eb:33:28:e2:19:a7: c6:fb:71:a8:e7:7c:df:ba:d3:cf:ba:a6:14:79:ed:34:63:f3: 38:4e:90:72:c0:c2:3d:ed:6c:27:f0:16:65:d0:95:17:8a:a6: 6d:75:7f:d0:54:c4:ae:3a:c2:75:10:e9:e1:cc:07:4b:da:45: ea:b0:f7:3f:19:ac:53:25:05:47:33:ff:8a:eb:68:06:5f:01: 8f:5b:70:28:9c:78:47:5b:1f:30:3f:5e:c2:30:ce:14:93:88: 3c:c5:b2:68:c1:7a:75:33:fa:07:eb:3c:1a:35:fc:6f:bf:80: 44:69:34:0e:39:ce:53:d8:47:ec:61:a1:a6:d3:c0:94:13:af: 1b:fa:c4:79:c0:d7:04:a1:0e:07:58:d6:ce:c0:93:1f:83:5a: 61:33:8f:5a:77:3e:d3:e5:7f:f7:6e:5f:da:42:98:82:49:90: 46:66:a4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaNOhpNMnLuF1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk MDg2MzFiMWYtYTc0ZS00NjcyLWEyZjMtM2EzYzNlNDhkN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnenPUBAMqzqbTCHNhy/z9f9Mee55zGCxatu5 gAN9xADI65JGcgTahjwHIXXSRKR7j0Ye5BmVrhbqtBmJKc35aYYGCZaTRVPVCX2R 4kBw5kd/BLm9iueStn9Ix5Vn+7uqvqJfUNwWIhP0zLEBDjIcxhifqPfL7lakaoiT lE2TVp4hMSj4i0VkWALUZzex+jitizqBEY2pLpCKD4V85aklIrmA4ZMffnG7Efe5 OZW8aoGe8Sn9ysXDmKz93eAWdLZ2lzUg9o5vKz41PMN84QmhWkZCVNhB67Jl3tJS K50som1F1Ci4O4Z+rtjijhq47moiKGUHXiX6g9C6h8cWPn5BWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtAhTOem+pHDnPl0Y4zyvKsNhjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNGMxNjBkY2YtZWQzMy0z ODM3LTg5ZTYtYTVkOTIzOTQ2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEjpSg2APddddMnDViC8d7vc5XDFKXSQQVKKgJUVOU69A1CKp83DgE0 qEs+befVoVSbeHv0S2bifkM0AHfg73Q73B2UMrV3iK4weyVVNU8iNxqXxeszKOIZ p8b7cajnfN+608+6phR57TRj8zhOkHLAwj3tbCfwFmXQlReKpm11f9BUxK46wnUQ 6eHMB0vaReqw9z8ZrFMlBUcz/4rraAZfAY9bcCiceEdbHzA/XsIwzhSTiDzFsmjB enUz+gfrPBo1/G+/gERpNA45zlPYR+xhoabTwJQTrxv6xHnA1wShDgdY1s7Akx+D WmEzj1p3PtPlf/duX9pCmIJJkEZmpLo= -----END CERTIFICATE-----Generated at Wed May 7 11:26:59 2025 by rpki-client